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AMENDMENTS TO THE CLAIMS 

The following listing of claims replaces all prior versions of the claims and all prior 
listings of the claims in the present application. 

1 . (previously presented) A Montgomery modular multiplier of a public-key 
cryptographic system that calculates a value congruent to "ABR 1 " (mod M) used in the 
cryptographic system, where A and B are input n-bit numbers, R" 1 is an inverse number of R 
modular-multiplied for "mod M", and M is a modulus, the Montgomery modular multiplier 
comprising: 

an A-register storing a bit value ai (where T denotes an integer in the range of 0 to n-1) 
of the number A, which is smaller than the modulus M; 

a B-register storing a bit value bi of the number B, which is smaller than the modulus M; 

an M-register storing a bit value mi of the modulus M, which is an odd number; 

a biA calculation logic circuit multiplying the number A by the bit value bi to obtain tyA; 

a qi calculation logic circuit solving a Boolean logic equation "so XOR Co XOR (bj AND 
ao)", where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value q\\ 

a qiM calculation logic circuit multiplying the modulus M by the bit value q; to obtain 

qiM; 

a 4-2 compressor performing 'n' additions on the carry C, the sum S, the biA, and the qiM 
to obtain interim values and summing the interim values to obtain a result using a carry 
propagation adder in response to a carry propagation adder signal; 

an S-register updating a bit value Si of the sum S and storing the updated bit value; and 
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a C-register updating a bit value q of the carry C and storing the updated bit value. 

2. (previously presented) The Montgomery modular multiplier of claim 1, wherein the 
4-2 compressor comprises: 

a first full adder unit summing a bit value bjai of the bjA, a bit value Sj+i of the sum S, and 
the bit value Cj of the carry C to obtain a carry cA; and a sum sA\\ 

a multiplexer (MUX) unit selectively outputting either a bit value qjinj of the qjM, a carry 
cAj-i, and the sum sAi or the bit value Sj+i of the sum S, the bit value Ci of the carry C, and a bit 
value cm of the carry C, in response to the carry propagation adder signal; and 

a second full adder unit performing 'n' additions on the bit value qimj of qjM, the 
carry cAm, and the sum sAj to calculate interim bit values Si of the sum S and q of the carry C, 
when the carry propagation adder signal is in an inactive state, and summing the bit value Sj+i of 
the sum S, the bit value Cj of the carry C, and the bit value cm of the carry C to obtain final 
results of the sum S and the carry C, when the carry propagation adder signal is in an active state. 

3. (previously presented) The Montgomery modular multiplier of claim 2, wherein a 
carry save adder structure is a 4-input 2-output structure, in which the first and second full adder 
units operate when the carry propagation adder signal is in the inactive state. 

4. (previously presented) The Montgomery modular multiplier of claim 2, wherein a 
carry propagation adder structure is a 3-input 2-output structure, in which only the second full 
adder unit operates when the carry propagation adder signal is in the active state. 



Application No. 10/660,476 
Attorney Docket No. 2557-000181/US 



5. (original) The Montgomery modular multiplier of claim 2, wherein the LSB of the 
carry cAm and the LSB of the carry Cj_i are in a first logic state. 

6. (previously presented) The Montgomery modular multiplier of claim 2 5 wherein the 
most significant bit (MSB) of the sum S is equal to the bit value cA n -i at a clock pulse before the 
carry propagation adder signal is activated. 

7. (previously presented) A method of performing a Montgomery modular 
multiplication in a Montgomery modular multiplier of a public-key cryptographic system, in 
which the Montgomery modular multiplier includes registers for storing bit values aj, bj, mj, 
and Si (where 'i' denotes an integer in the range of 0 to n-1) of a word A, a word B, a 
modulus M, a carry C, and a sum S, respectively, and calculates a value congruent to "ABR" 1 " 
(mod M), where A and B are input n-bit numbers, R" 1 is an inverse number of R modular- 
multiplied for "mod M", and M is a modulus, the method comprising: 

receiving the number A, the number B, and the modulus M; 

multiplying the number A by a bit value bj to obtain each bit of b;A; 

solving a Boolean logic equation "so XOR Co XOR (bi AND ao)", where s 0 is the least 
significant bit (LSB) of a sum S, Co is the LSB of a carry C, bj is the bit value of the number B, 
and ao is the LSB of the number A, to obtain a bit value q;; 

multiplying the modulus M by the bit value qi to obtain each bit of qjM; 

performing 'n' additions on the carry C, the sum S, the bjA, and the qiM to obtain interim 
values for each bit of the sum S and the carry C in a carry save adder structure, in response to a 
carry propagation adder signal; and 
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summing the interim values to obtain the final results of the sum S and the carry C in a 
carry propagation adder structure, in response to the carry propagation adder signal. 

8. (original) The method of claim 7, wherein the number A is smaller than the 
modulus M. 

9. (original) The method of claim 7, wherein the number B is smaller than the 
modulus M. 

10. (original) The method of claim 7, wherein the modulus M is an odd number. 

1 1 . (previously presented) The method of claim 7, wherein the interim values and final 
results of the sum S and the interim values and final results of the carry C are calculated by: 

summing a bit value b fii of the bjA, a bit value Sj+i of the sum S, and a bit value Ci of the 
carry C to obtain a carry cAj and a sum sAj; 

selectively outputting either a bit value qjmj of the qM, a carry cAj_i, and the sum sAj or 
the bit value Sj+i of the sum S, the bit value Cj of the carry C, and a bit value cm of the carry C 3 in 
response to the carry propagation adder signal; 

performing 'n' additions on the bit value qm of the qiM, the carry cAm, and the sum sAi 
to calculate interim bit values Si of the sum S and c* of the carry C, when the carry propagation 
adder signal is in an inactive state; and 
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summing the bit value Sj+i of the sum S, the bit value Cj of the carry C, and the bit 
value cm of the carry C to obtain final results of the sum S and the carry C, when the carry 
propagation adder signal is in an active state. 

12. (previously presented) The method of claim 7, wherein the carry save adder 
structure is a 4-input 2-output structure, in which the interim values of the sum S and the carry C 
are obtained from the bi A and the qiM when the carry propagation adder signal is in an inactive 
state. 

13. (previously presented) The method of claim 7, wherein the carry propagation adder 
structure is a 3-input 2-output structure, in which the final results of the sum S and the carry C 
are obtained from the interim values of the sum S and the carry C when the carry propagation 
adder signal is in an active state. 

14. (previously presented) The method of claim 11, wherein the LSB of the carry cAj_i 
and the LSB of the carry Cj_i are in a first logic state. 

15. (previously presented) The method of claim 11, wherein the most significant bit 
(MSB) of the sum S is equal to the bit value cA n _i at a clock pulse before the carry propagation 
adder signal is activated. 

16. (canceled) 
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17. (previously presented) A Montgomery modular multiplier of a public-key 
cryptographic system, comprising: 

a multiplicand register, storing a bit value a; of a number A; 
a modulus register, storing a bit value mi of a modulus M; 
a multiplier register, storing a bit value bi of a number B; 

a bjA calculation logic circuit multiplying the number A by a bit value bi to obtain each 
bit ofbiA; 

a qi calculation logic circuit solving a Boolean logic equation "s 0 XOR c 0 XOR (bj AND 
ao)", where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bi is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value qi (where T 
denotes an integer in the range of 0 to n-1); 

a qiM calculation logic circuit multiplying the modulus M by the bit value qi to obtain 
each bit of qiM; and 

a t-s compressor, wherein t>3 and s>l, performing 'n' additions on the carry C, the 
sum S, the bjA, and the qM to obtain interim values for each bit of the sum S and the carry C in 
a carry save adder structure and summing the interim values to obtain final results of the sum S 
and the carry C in a carry propagation adder structure, in response to a carry propagation adder 
signal. 

18. (previously presented) A system embodying a Montgomery modular multiplier, the 
system comprising: 

an A-register storing a bit value aj (where 'i' denotes an integer in the range of 0 to n-1) 
of an n-bit number A; 
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a B-register storing a bit value b { of an n-bit number B; 
an M-register storing a bit value mj of an n-bit modulus M; 

a bjA calculation logic circuit multiplying the number A by the bit value bj to obtain bjA; 

a qj calculation logic circuit solving a Boolean logic equation "s 0 XOR c 0 XOR (bi AND 
ao)'\ where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value qi; 

a qiM calculation logic circuit multiplying the modulus M by the bit value q< to obtain 

qiM; 

a compressor performing 'n' additions on the carry C, the sum S, the bjA, and the qjM to 
obtain interim values and summing the interim values to obtain a result using a carry propagation 
adder in response to a carry propagation adder signal; 

an S-register updating a bit value Si of the sum S and storing the updated bit value; and 

a C-register updating a bit value Cj of the carry C and storing the updated bit value; 

wherein given that the number A is smaller than the modulus M, the number B is smaller 
than the modulus M, the modulus M is odd, and R~ l is an inverse number of R modular- 
multiplied for "mod M", the system calculates a value congruent to "ABR" 1 " (mod M). 

19. (previously presented) The system of claim 18, wherein the system comprises a 
public-key cryptographic system. 

20. (previously presented) The system of claim 18, wherein the system is a public-key 
cryptographic system. 
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21. (previously presented) The system of claim 18, wherein the value congruent to 
"ABR- 1 " (mod M) is used in a public-key cryptographic system. 

22. (previously presented) The system of claim 18, wherein the value congruent to 
"ABR" 1 " (mod M) is used in the system as a cryptographic key. 



